Configure the cloud block timeout period (Microsoft)

When Microsoft Defender Antivirus finds a suspicious file, it can prevent the file from running while it queries the Microsoft Defender Antivirus cloud service.

The default period that the file is blocked is 10 seconds. If you’re a security administrator, you can specify more time to wait before the file is allowed to run. Extending the cloud block timeout period can help ensure there is enough time to receive a proper determination from the Microsoft Defender Antivirus cloud service.

Prerequisites to use the extended cloud block timeout

Block at first sight and its prerequisites must be enabled before you can specify an extended timeout period.

Specify the extended timeout period using Microsoft Endpoint Manager

You can specify the cloud block timeout period with an endpoint security policy in Microsoft Endpoint Manager.

1. Go to the Endpoint Manager admin center (https://endpoint.microsoft.com/) and sign in.
2. Select Endpoint security, and then under Manage, choose Antivirus.
3. Select (or create) an antivirus policy.
4. In the Configuration settings section, expand Cloud protection. Then, in the Microsoft Defender Antivirus Extended Timeout In Seconds box, specify the more time, in seconds, from 1 second to 50 seconds. Whatever you specify is added to the default 10 seconds.
5. (This step is optional) Make any other changes to your antivirus policy. (Need help? See Settings for Microsoft Defender Antivirus policy in Microsoft Intune.)
6. Choose Next, and finish configuring your policy.

Specify the extended timeout period using Group Policy

You can use Group Policy to specify an extended timeout for cloud checks.

1. On your Group Policy management computer, open the Group Policy Management Console
2. Right-click the Group Policy Object you want to configure and then select Edit.
3. In the Group Policy Management Editor, go to Computer configuration, and then select Administrative templates.
4. Expand the tree to Windows components > Microsoft Defender Antivirus > MpEngine.
5. Double-click Configure extended cloud check and ensure the option is enabled.

   Specify the extra amount of time to prevent the file from running while waiting for a cloud determination. Specify the extra time, in seconds, from 1 second to 50 seconds. Whatever you specify is added to the default 10 seconds.

6. Select OK.

Source : Official Microsoft Brand
Editor by : BEST Antivirus KBS Team